CVE-2011-1898

2011-08-1218:55:00

Debian Security Bug Tracker

security-tracker.debian.org

7.4 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

28.4%

JSON

Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by “using DMA to generate MSI interrupts by writing to the interrupt injection registers.”

OSVersionArchitecturePackageVersionFilename
Debian12allxen< 4.1.1-1xen_4.1.1-1_all.deb
Debian11allxen< 4.1.1-1xen_4.1.1-1_all.deb
Debian10allxen< 4.1.1-1xen_4.1.1-1_all.deb
Debian999allxen< 4.1.1-1xen_4.1.1-1_all.deb
Debian13allxen< 4.1.1-1xen_4.1.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	xen	< 4.1.1-1	xen_4.1.1-1_all.deb
Debian	11	all	xen	< 4.1.1-1	xen_4.1.1-1_all.deb
Debian	10	all	xen	< 4.1.1-1	xen_4.1.1-1_all.deb
Debian	999	all	xen	< 4.1.1-1	xen_4.1.1-1_all.deb
Debian	13	all	xen	< 4.1.1-1	xen_4.1.1-1_all.deb